Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c7a100-0e99-3ec1-8317-06ab816f3825.roa
File: 17c7a100-0e99-3ec1-8317-06ab816f3825.roa (raw, json)
Hash identifier: tr0BRevWDhvgQOo1vwIRVZclAbUXnn5WP5P1+D4dpyg=
Subject key identifier: C6:78:C3:35:B3:B0:2C:02:1A:F5:A5:BB:AE:9E:18:51:B1:10:E8:09
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F432858430A0C0CC60A884F179D892C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c7a100-0e99-3ec1-8317-06ab816f3825.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 396982
IP address blocks: 35.203.228.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:0c:0c:c6:0a:88:4f:17:9d:89:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ffe43c91-b0c0-44d4-af00-16f315e8b060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:f3:ac:92:2c:49:fb:ff:84:56:bb:eb:e9:
bd:c0:ec:32:19:73:bb:3f:d2:c8:38:3e:21:f4:36:
df:a8:d0:5d:12:4f:d6:31:04:e3:b1:d7:17:3d:60:
ba:fa:3a:3a:f9:6d:f1:3e:6a:79:e6:44:9e:a8:4a:
bd:f8:2c:83:e5:b0:c3:2f:fc:36:0e:e4:fa:44:04:
80:6e:65:67:fc:a2:e6:8e:d6:25:35:9e:63:4b:63:
7a:c9:bf:53:a2:8d:25:8a:17:0f:69:ce:6c:dc:6a:
a3:81:6e:91:85:03:f7:3f:83:19:88:00:81:b5:98:
f6:f4:4a:23:6e:9e:96:20:cf:cd:0c:c7:76:b8:16:
f9:fb:b6:72:81:ab:4b:bf:56:f5:51:ac:33:99:74:
d1:f1:3b:a1:cd:67:88:b6:63:37:1b:bd:a3:df:5b:
94:88:3b:ac:36:36:1b:4f:ba:ac:45:84:e0:75:af:
02:a8:72:f4:20:d1:b6:83:7f:06:ae:fb:a3:5f:8c:
42:cf:d2:5b:7e:dd:31:5e:09:d1:d0:ba:39:24:aa:
36:48:97:87:c8:55:48:2c:bc:5e:c8:19:46:82:c9:
f9:51:ab:26:11:d8:16:22:64:b8:2f:45:91:5d:6b:
28:a2:ca:e5:3d:7d:ce:11:79:4e:69:57:13:dc:3e:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:78:C3:35:B3:B0:2C:02:1A:F5:A5:BB:AE:9E:18:51:B1:10:E8:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/17c7a100-0e99-3ec1-8317-06ab816f3825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
35.203.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b6:91:40:65:2f:f2:2b:00:83:4c:be:fe:34:79:b8:1c:83:
f2:0b:af:5c:68:2a:96:63:56:56:23:db:c7:fa:ed:8d:1d:24:
43:f2:cb:6c:76:db:bc:07:3e:03:71:7c:ba:81:15:78:80:71:
b3:ef:af:58:95:13:f8:3f:29:72:d9:d8:1d:70:06:d9:2e:3d:
70:54:47:ab:aa:f7:e7:d0:68:66:3a:8d:7b:24:5f:c7:7e:aa:
1d:9e:49:55:df:03:7d:fc:a9:28:87:da:84:04:4b:65:bd:1c:
ab:4c:22:d4:10:cf:a1:3b:9a:c1:0b:23:67:27:c8:14:55:b5:
77:07:ac:15:fd:01:dd:30:c5:1b:92:9a:c4:c2:b9:30:29:e2:
90:a1:78:2b:c1:a4:f6:69:f8:96:bc:64:59:54:a0:bd:b5:aa:
ce:8a:b4:d5:26:04:ae:76:b7:e7:bc:7e:f3:20:1a:7f:64:ba:
22:52:14:6d:06:60:af:f2:d0:fc:28:a9:a3:e1:72:bf:96:9a:
75:6c:3f:aa:e1:8e:23:63:e2:3c:9c:71:04:88:68:81:54:d5:
f9:92:04:cf:f2:8d:ce:11:53:56:30:b3:34:f4:b8:ab:62:d1:
0e:3f:78:ec:44:38:5d:ca:d4:0f:97:6a:3d:a0:e0:a9:ea:03:
f2:9c:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:42:32 2025 by rpki-client